Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o-6wztnpX6UwkxHAyf3I7zTJMHw.roa
File: o-6wztnpX6UwkxHAyf3I7zTJMHw.roa (raw, json)
Hash identifier: nEiYlaY0y8lixWL9dnMoV0Fg3UDg7B6XewbrqfLpw+s=
Subject key identifier: A3:EE:B0:CE:D9:E9:5F:A5:30:93:11:C0:C9:FD:C8:EF:34:C9:30:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F2E25D6E6953580F8DDC1E7BE8F69F7FC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o-6wztnpX6UwkxHAyf3I7zTJMHw.roa
Signing time: Tue 30 Apr 2024 08:36:22 +0000
ROA not before: Tue 30 Apr 2024 08:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:25:d6:e6:95:35:80:f8:dd:c1:e7:be:8f:69:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 30 08:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3eeb0ced9e95fa5309311c0c9fdc8ef34c9307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:50:b2:8c:fe:44:78:9d:fc:27:df:68:27:
35:93:75:94:ad:ec:0a:4e:66:ff:95:41:82:f4:92:
03:fa:c9:a3:54:fd:96:b2:3c:8f:06:0c:29:ac:c2:
af:2c:b9:a5:24:12:8d:77:8f:59:45:21:98:c8:57:
37:9d:26:0f:19:20:79:60:6b:bf:9f:cd:70:7d:23:
72:b1:34:7e:2c:6c:29:d6:11:15:e2:8b:86:55:37:
71:f9:75:aa:3f:cf:ee:40:7a:28:e3:b6:7e:f5:55:
f6:c5:35:da:76:ab:4d:1f:42:3e:5b:12:6b:35:ad:
dc:27:52:54:5d:a5:2d:2d:d8:ed:40:b7:8d:ba:79:
04:d6:37:a0:8b:59:4e:de:31:56:ae:12:79:10:5b:
da:64:83:cb:1d:6d:4f:9b:bb:4b:42:33:9a:0f:bd:
b2:c2:7e:da:77:03:66:79:70:62:e7:bd:ad:1b:31:
9a:da:d8:70:63:42:47:fd:fb:1b:ef:b3:33:bb:bd:
cc:a9:bb:85:71:54:00:37:18:45:9f:ec:06:44:80:
7a:98:40:b8:12:86:db:33:65:fc:53:7e:fd:27:10:
b6:70:4b:d4:32:99:25:eb:e9:17:f4:72:4d:55:05:
3a:3a:93:0d:f5:21:12:10:1a:af:5f:01:52:52:b3:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:B0:CE:D9:E9:5F:A5:30:93:11:C0:C9:FD:C8:EF:34:C9:30:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o-6wztnpX6UwkxHAyf3I7zTJMHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.139.123.0/24
91.92.67.0/24
93.123.76.0/22
93.123.112.0/22
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c0:ff:9e:33:5f:a1:31:22:b2:98:32:ba:18:b8:37:15:e0:
70:10:33:4b:d6:bf:45:32:1f:0b:db:56:5c:c3:0e:84:27:2a:
60:e1:5f:ba:04:27:d1:4a:8f:67:78:92:63:f2:cf:20:40:54:
aa:49:07:37:47:ed:f8:3a:31:86:18:20:6d:49:4d:5a:00:d3:
ac:86:9f:58:14:e8:c3:6d:40:5f:37:59:69:03:da:16:e8:25:
bc:38:84:b3:fd:26:15:16:52:d7:43:47:11:40:38:0d:b0:84:
21:06:1a:76:0f:c9:32:17:0f:a1:72:ac:5c:93:a5:70:84:75:
c4:46:2d:a8:ca:8c:f5:98:eb:a3:89:cd:e9:08:b3:d8:4b:e9:
19:51:5e:ce:fa:f7:ba:c8:c6:75:d8:47:19:6e:72:b8:3c:d8:
2c:1d:e7:cf:ab:ec:e9:f9:9e:29:62:db:60:35:ca:d0:69:df:
8a:b0:b6:9c:77:f5:c0:36:bf:91:7d:34:de:f7:e0:e1:c6:ec:
5a:cf:90:3b:d4:3e:cf:3d:1b:6c:81:84:8c:e7:f2:13:06:c4:
e5:b0:24:9b:cb:1a:47:f6:69:9b:e7:5f:11:ab:eb:f4:ae:a3:
2a:ea:aa:c1:48:fa:5d:c2:81:a3:e5:f6:5c:ba:8e:ce:5e:e3:
d9:c4:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:52:23 2024 by rpki-client on console-fra.rpki-client.org